Up until last week, the U.S. could only access data stored overseas through mutual legal-assistance treaties (MLATs). With a MLAT, two or more nations put in writing exactly how they are willing to help each other with legal investigations. The Senate votes on each MLAT, and it must receive a two-thirds approval to pass.

Through the CLOUD Act, U.S. law enforcement officials at any level, from local police to federal agents, can force tech companies to turn over user data regardless of where the company stores the data.

The CLOUD Act also gives the executive branch the ability to enter into “executive agreements” with foreign nations, which could allow each nation to get its hands on user data stored in the other country, no matter the hosting nation’s privacy laws. These agreements don’t require congressional approval.